How does "AWS Config" differ from "AWS CloudTrail" in terms of what they track and their primary use cases?
Correct! Well done.
Incorrect.
The correct answer is A) CloudTrail records a history of API calls (who did what and when), while AWS Config tracks resource configuration over time, evaluating it against rules for compliance — often used together: CloudTrail for "who", Config for "what changed and compliance"
Correct Answer
CloudTrail records a history of API calls (who did what and when), while AWS Config tracks resource configuration over time, evaluating it against rules for compliance — often used together: CloudTrail for "who", Config for "what changed and compliance"
CloudTrail is an audit log of API activity, while Config is a configuration management/compliance tool that records resource configuration snapshots and changes, evaluating them against rules (e.g. "is encryption enabled?") — combining both gives a full picture of changes and their compliance impact.